danvics/pediatric-ai-scribe-v3
1
0
Fork 0
Code Issues Pull requests Projects Releases 16 Packages Wiki Activity Actions

Security: remove auth debug logging that exposed emails and responses

Browse source 
Removed console.log statements in auth.js that logged email addresses
and auth API responses to browser console. Final cleanup for v9.
This commit is contained in:
ifedan-ed 2026-03-29 10:41:35 +00:00
parent 54c9aa1843
commit f609891d0d
1 changed files with 1 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
public/js/auth.js
View file

@ -15,11 +15,7 @@ document.addEventListener('DOMContentLoaded', function() {
var TOKEN_KEY = 'ped_scribe_token'; var TOKEN_KEY = 'ped_scribe_token';
var USER_KEY = 'ped_scribe_user'; var USER_KEY = 'ped_scribe_user';
console.log('[Auth] Initializing...'); // Auth module initialized
console.log('[Auth] authScreen:', !!authScreen);
console.log('[Auth] mainApp:', !!mainApp);
console.log('[Auth] loginForm:', !!loginForm);
console.log('[Auth] registerForm:', !!registerForm);
// Make sure forms are visible/hidden correctly on load // Make sure forms are visible/hidden correctly on load
showLoginForm(); showLoginForm();
@ -315,7 +311,6 @@ document.addEventListener('DOMContentLoaded', function() {
return false; return false;
} }
console.log('[Auth] Attempting login for:', email);
showLoading('Signing in...'); showLoading('Signing in...');
var body = { email: email, password: password }; var body = { email: email, password: password };
@ -329,7 +324,6 @@ document.addEventListener('DOMContentLoaded', function() {
.then(function(r) { return r.json(); }) .then(function(r) { return r.json(); })
.then(function(data) { .then(function(data) {
hideLoading(); hideLoading();
console.log('[Auth] Login response:', JSON.stringify(data).substring(0, 200));
if (data.requires2FA) { if (data.requires2FA) {
var grp = document.getElementById('totp-group'); var grp = document.getElementById('totp-group');
@ -413,7 +407,6 @@ document.addEventListener('DOMContentLoaded', function() {
return false; return false;
} }
console.log('[Auth] Registering:', email);
showLoading('Creating account...'); showLoading('Creating account...');
fetch('/api/auth/register', { fetch('/api/auth/register', {
@ -424,7 +417,6 @@ document.addEventListener('DOMContentLoaded', function() {
.then(function(r) { return r.json(); }) .then(function(r) { return r.json(); })
.then(function(data) { .then(function(data) {
hideLoading(); hideLoading();
console.log('[Auth] Register response:', JSON.stringify(data).substring(0, 200));
if (data.success && data.token && data.user) { if (data.success && data.token && data.user) {
enterApp(data.user, data.token); enterApp(data.user, data.token);